Microsoft Exam SC-200 Topic 1 Question 90 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 90
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.

You initiate a live response session on each device.

You need to collect a Defender for Endpoint investigation package from each device.

On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?

ADevice1 and Device2 only

BDevice1, Device2, and Device3 only

CDevice3 and Device4 only

DDevice1, Devke2, Device3, and Device4

Show Suggested Answer

Suggested Answer: B

by Emmanuel at Jan 28, 2025, 10:00 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aleisha

2 days ago

This question seems straightforward, but I want to make sure I understand the requirements correctly before answering.

upvoted 0 times

...

Cherri

8 months ago

I believe the correct answer is Device1, Device2, and Device3 only.

upvoted 0 times

...

Adelle

8 months ago

I'm not sure, but I think we might also be able to collect the package from Device3.

upvoted 0 times

...

My

8 months ago

I agree with Francoise, the advanced live response commands can be run on Device1 and Device2.

upvoted 0 times

...

Francoise

8 months ago

I think we can collect the package from Device1 and Device2 only.

upvoted 0 times

...

Veronique

8 months ago

I bet the answer is D, but I'm really just hoping Device4 is a toaster. *laughs* You know, for a truly advanced investigation package.

upvoted 0 times

Jacqueline

7 months ago

User4: D sounds good to me too. Let's collect the package from all devices.

upvoted 0 times

...

Tamekia

7 months ago

User3: I also believe it's D. Let's go with that.

upvoted 0 times

...

Dorothy

7 months ago

User2: Yeah, I agree. Device4 is not a toaster, unfortunately.

upvoted 0 times

...

Laquita

7 months ago

User1: I think the answer is D.

upvoted 0 times

...

Helga

8 months ago

Device1 and Device2 sound like your typical PCs, but Device3 and Device4 could be anything. Better check the fine print on those advanced live response commands. *chuckles*

upvoted 0 times

Jovita

8 months ago

I agree, Device3 and Device4 might not support the advanced live response commands.

upvoted 0 times

...

Arminda

8 months ago

I think it's A) Device1 and Device2 only.

upvoted 0 times

...

Christa

8 months ago

Hmm, I'm not so sure. What if Device4 is a Mac? Then the answer would be D, right? I'm just throwing it out there.

upvoted 0 times

...

Delfina

8 months ago

I think the answer is B. Device1, Device2, and Device3 only. Advanced live response commands can only be run on devices with supported operating systems.

upvoted 0 times

Emelda

8 months ago

Yes, that makes sense. Those devices are the ones that support running advanced live response commands.

upvoted 0 times

...

Lazaro

8 months ago

I agree with you, I think the answer is B. Device1, Device2, and Device3 only.

upvoted 0 times

...